<p>Many organisations collect sensitive data that cannot be freely shared. Hospitals store brain magnetic resonance imaging (MRI) scans on internal servers; banks keep transaction records behind strict firewalls; agricultural services retain crop images in isolated repositories. Federated learning (FL) allows models to be trained without centralising raw data, yet most existing systems address a single domain and offer limited insight into model behaviour and provenance over time. BlockFedX is a cross-domain federated learning system designed to address three simultaneous tasks: credit card fraud detection on tabular data, brain tumour detection on MRI images, and plant disease recognition on leaf images. These three domains were deliberately selected because they represent the principal data modalities in real-world privacy-sensitive deployments—structured tabular records, greyscale medical images, and colour natural images—and because public benchmark datasets exist for all three, enabling reproducible evaluation. The system uses a shared backbone that is updated only where model layers have compatible tensor shapes, while domain-specific output layers remain local at each client. Explanations are computed at the clients using SHAP feature-attribution for tabular data and Grad-CAM visual heatmaps for images; the server receives only compact statistical summaries. The server also applies a distance-based anomaly test on client updates and records model hashes, explanation summaries, and anomaly flags in a hash-chained ledger. Experiments on three public datasets under non-identical client data distributions show that BlockFedX achieves an average fraud-detection F1-score of 0.92, 74.32% mean validation accuracy on BrainMRI, and 77% test accuracy on PlantVillage, while keeping all raw data local. These results are below strong centralised baselines, as expected under compact models and non-IID splits, but the system simultaneously provides three properties rarely combined in prior work: cross-domain federated training via a shape-safe backbone, client-side explanations integrated into the learning loop, and a lightweight tamper-evident record of model evolution across rounds.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

BlockFedX: a cross-domain federated learning system with explainability, anomaly detection, and tamper-evident logging

  • K. Sowjanya Naidu,
  • G. Jaya Suma

摘要

Many organisations collect sensitive data that cannot be freely shared. Hospitals store brain magnetic resonance imaging (MRI) scans on internal servers; banks keep transaction records behind strict firewalls; agricultural services retain crop images in isolated repositories. Federated learning (FL) allows models to be trained without centralising raw data, yet most existing systems address a single domain and offer limited insight into model behaviour and provenance over time. BlockFedX is a cross-domain federated learning system designed to address three simultaneous tasks: credit card fraud detection on tabular data, brain tumour detection on MRI images, and plant disease recognition on leaf images. These three domains were deliberately selected because they represent the principal data modalities in real-world privacy-sensitive deployments—structured tabular records, greyscale medical images, and colour natural images—and because public benchmark datasets exist for all three, enabling reproducible evaluation. The system uses a shared backbone that is updated only where model layers have compatible tensor shapes, while domain-specific output layers remain local at each client. Explanations are computed at the clients using SHAP feature-attribution for tabular data and Grad-CAM visual heatmaps for images; the server receives only compact statistical summaries. The server also applies a distance-based anomaly test on client updates and records model hashes, explanation summaries, and anomaly flags in a hash-chained ledger. Experiments on three public datasets under non-identical client data distributions show that BlockFedX achieves an average fraud-detection F1-score of 0.92, 74.32% mean validation accuracy on BrainMRI, and 77% test accuracy on PlantVillage, while keeping all raw data local. These results are below strong centralised baselines, as expected under compact models and non-IID splits, but the system simultaneously provides three properties rarely combined in prior work: cross-domain federated training via a shape-safe backbone, client-side explanations integrated into the learning loop, and a lightweight tamper-evident record of model evolution across rounds.